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TABLE SEARCHING TECHNIQUE 



BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to table searching 
techniques and in pax Liculax Lu a Lablfc searching system and 
5 method for use in, for example, a database system or a switching 
system SUCll as a packet switchiny system ui a luulei. 

2 . Description or the Related Art 

III a packet cuuuuuuication ue Iwoxk, lypicaliy Lhe Intexnet, 
packet transmission from a source to a destination is performed 

10 by packet switches such as xuutexs, each uf which forwards a 
received packet to a next hop node based on the destination 
address of the packet. Recently, iu addition. Lc the packet: 
routing operation, the need may arise for a router to handle 
additional processing fox IPsec (IP Security). IPsec is a 

15 security protocol working at layer 3 and is expected to become 
the standard for virtual private uetwuxks (VPNs) on Lhe Ixitexne t . 
Tharefora, the need for a high-speed router is growing and 
several techniques have been pxopused. 

The inventor has proposed an improved packet switch m 
20 Japanese Patent Application No . 11 -098140 filed on April 5 , 1999 
(Unexamined Publication No. P20Q0-295274A published on October 
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20, 2000). The proposed packet 3Witch U3C3 a tabic searching 
hardware device to allow a burden upon a microprocessor to be 
reduced, resulting in increased routing and IP3ec processing 
speed. 

5 More specifically, the packet switch is provided with an 

IP flow tabic rcgiGtcring a routing result obtained by the 
routing process using the source and destination addresses of 
an IP packet a3 a search key, When receiving an IP packet, the 
IF flow table is searched using the if source ana destination 

10 addresses of the received packet a3 a search key. When a hit 
is found in the I? tiow table, the microprocessor performs a 
forwarding operation of the packet based on the found routing 
result information without performing the routing process. 
Similarly, by performing IPsec processing with a security 

15 processor as hardware, the packet switching with security 
processing can be performed at high 3peeds , 

In routing and IPeec processing, recently, handling new 
IP (internet Protocol) traffic of encapsulated packets or 
Aggregated flow has been required o£ a router. Aggregated flow 
20 includes a plurality of ip packets to be transferred to the same 

destination router. More specifically, these IP packets are 
aggregated by an encapsulating header whose routing information 
ic determined based on the IP destination and source addressee 
of the included packets* In this case, an IP traffic of original 
25 IP packets is called Micro flow. 
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The proposed packet switch as described above can achieve 

the simplified device configuration ana the high-speed 

switching by performing the forwarding processing of original 
packers (Micro i low] and encapsulated packets c Aggregated flow] 
5 with the same hardware. 

In the case where the processing procedure for aggregated 
if traffic is changed due to, for example, invalidation of 
security association, however, update of the tabic searching 
hardware device cannot be completed rapidly , More specifically . 

10 since entries in the IP flow table arc created in the order in 

which if traffic appeared, tne microprocessor searches tne if 
flow table for entries related to the aggregated IP traffic and, 
when a hit is found, tne microprocessor can update tne found 
entry depending on a change of the aggregated IP traffic, 

15 Such a search process as described above is performed for 

ail the entries in the I? flow table. Therefore, in the case 
of a large number of entries , the time required for the search 
is not neqliqible. Further, during the search, the primary 
search operation for switching cannot be performed, 

20 Accordinqiy, the search speed of the packet switch is reduced 
and thereby the packet switch throughput is also lowered. 

One method for solving such a problem may be considered 
such that the address of entry fox each IP fiuw (miciu flow) 
is directly stored in a database including a routing table. But 
25 il la not pi ef enable , In yeneral, it lb uul determined huw many 
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micro flows belong to a single aggregated flow. Therefore, it 
is difficult to estimate the size of database and merer ore an 
vacancy may be generated in the ensured database area. 

The same problem may occur in not only a router but also 
5 any searching system. For example, consider that a searching 
system having a dedicated search table in addition to a database 

is designed to store data that has been searched for into the 
dedicated search table, In such a searching system, when the 
search is started, the dedicated search table is first searched 

10 and, if no hit is found in the dedicated search table, then the 
database is searched. In order to ensure high-speed searching, 
the capacity of the dedicated search table should be limited. 
Accordingly, if there is data with low use frequency or data 
after the expiration of a preset time interval, then the data 

it* should be deleted from the dedicated search table xn the order 
o£ registration. 

Especially, in the case where a plurality of pieces of 
data are associated with each othex, it is not easy to be 
consistent with the database. When a chain of pieces of data 
20 is deleted from the database, the related data should be deleted 
from the dedicated search table. At this time, it is necessary 
to search the dedicated search table for all related dala. 
Therefore, high-speed searching and updating operation cannot 
be achieved. 
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SUMMARY OF THE INVENTION 

An object: of zhe present Invention is io provide a 
searching system and method allowing high-speed data searching 
and updating operation. 
5 Another object of the present invention is to provide a 

packet switching method and system allowing high-«ipAftd packet 
routing operation. 

According to the present invention, a data searching 
system includes : a database for storing a plurality of pieces 

10 of data* a search table for storing at least one piece of dara 
which has been selected by the database; and an address pointer 
table for storing location information indicating an entry 
address of each piece of data stored in the search table and/or 
relationship information among entry addresses of pieces or data 

15 slored in the search table. 

The address pointer table may include a plurality of memory 
blocks each having a lixed length on a recording medium, wherein 
the memory blocks are located at consecutive addresses, wherein 
each of Ihe memory blocks comprises; a first area lor storing 

20 an entry address indicating a location of a corresponding pier.p 
of data fluxed in the search table; and a second area lor storing 
one of a next block address and a bottom-indicating flag, the 
next block address indicating an address of a memory block 
storing data following the corresponding piece of data, and the 
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bottom indicating flag indicating that a current memory block 
is a bottom ot a list. 

^Phe data searching 3ys-temmay further include a controller 
controlling such that the search table is searched tor a desired 
5 piece o£ data before the database and, if a hit is found in the 
search table, then a found piece of data is used as a search 
result, and if no hit is found in the search table, then the 
database is ftftarrthftd for the desired plan* of data and a found 
piece of data is used as a search result and is registered into 
10 the search table, whftrftin a pi aha of data with low rA.tr i ev*d 
frequency is deleted from the search table according to a 
predetermined condition and all linked memory blocks related 
to the deleted piece of data are released into available memory 
blocks . 

15 According to another aspect of the present invention, a 

packet processing system includes: a mi croprncfissnr ; a routing 
table; a searcher having a search memory connected thereto, 
wherein the search memory stores a search tab! a which i s usp.d 
to increase in search speed for packet forwarding; and an address 

20 pointer table for Storing location infnrmatinn indin^ring an 
entry address of each piece of data stored in the search table 
and/or relationship information among entr-y addresses of pieces 
of data stored in the search table. The address pointer table 
may be provided in a main memory of the microprocessor or in 

25 the search memory. 

Ths address pointer table may include a plurality of memory 
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blocka each having a fixed length on a recording medium, wherein 
the memory blocks are located at consecutive addresses, wherein 
each of the memory blocks compri3e3 ; a first area for storing 
an entry address indicating a location of a corresponamg piece 
5 of data stored in the search table; and a second area for storing 
one of a next block address and a bottom-indicating flag, the 
next block address indicating an address of a memory block 
storing data following the corresponding plana of dara, anrl fha 
bottom- indicating flag indicating that a current memory block 

10 is a bottom of a list. 

In the packet processing system as described above, when 
the routing table has bppn npriarprl, the a^rpss pointer tab! p 
is accessed based on contents of an entry to be changed to obtain 
location information of thp p.ntry to hp changed *nr! ^I-Hps 

15 related to the entry to be changed in the search memory, and 
the entry and related entries are changed so as to be consistpnt 
with the routing table - 

According to still another aspect of the present invent i on , 
a system includes; a first memory for retrievaoly storing a 

20 plurality of entries; a second memory for storing a copy of an 
entry that has been retrieved from the first memory to 
retrievably store a plurality of retrieved entries,* a third 
memory for storing a list of retrieved entries which are linXed 
from a leading one to a bottom one; and a data controller for 

25 accessing a desired retrieved entry by referring to the list 
stored in the third memory. 
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The data controller may proccas the de3±red retrieved 
entry so as to be consistent witn a corresponding entry stored 
in the first memory when the corresponding entry has been 
processed. 

5 According to further another aspect of the present 

invention, a packet switching system includes: a routing table 
for retrievably storing a plurality of routing entries; a flow 
tab! ft for storing a copy of a routing entry Indicating a parkftt 
flow that has been retrieved from the routing table to 

10 rfttriftvahly stora a plurality of rAtriftVAd park^t flows; an 
address pointer table for storing a list of retrieved packet 
flow*: which arp linked from n leading nnp to a bnffnm nnp; ^ 
search processor for accessing a desired retrieved packet f low 
in the flow tab! p. by rpfprring tn thp 1 isf qtorpd in thp. addrpss 

15 pointer table; and a microprocessor performing a packet routing 
control. 

When a routing entry has been designated to be processed 
according to predetnrm-i np.d routing processing, thp. search 
processor may process a corresponding retrieved packet flow in 

20 the flow table SO as to bp ennsi stp.nt wi tb the designator! muting 
entry stored in the routing table. 

Each of the routing pntri p^ stored in the renting t^hl o 
may have a first indicator and a second indicator, the first 
indicator indicating which one of a single packet £3ow and an 

25 aggregated packet flow the routing entry relates to, wherein 
the aggregated packet flow comprises a plurality of single paokp.t 
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flows linked, and the second indicator indicating a leading 
nddr«ss of thA list in the address pointer tnhlA. 

The list of retrieved packet flows may include a plurality 
of memory hi neks AAoh correspond*! ng rn rhft rprri evp.ri psnkp.r f"! nvs , 
5 each of the memory blocks comprising an address of a 

corresponding retrieved packet flow in the flow table and a next 
pointer indicating one of an address ol a next memory block 
following the memory block and an address of the memory block 
itself . 

10 Whan an aggregated routing entry stored in the routing 

table is designated, the sfidiuh pxueessox may deceaa the address 
pointer table depending on the second indicator of the aggregated 
xuutiny exilxy to txace Lhe list uf single packet fluws xeialed 
to the aggregated routing entry so as to access the single packet 

15 flaws xeialed lu Llie ayyxeyaled xuutiny eulxy* 

The search processor may process the single packet flows 
related lu llie aggregated xuutiny eulxy so a& lu be consistent 
with the routing table when the routing table has been updated. 
A packet swilchiny method includes the steps uf: a) 

20 retrievably storing a plurality of routing entries in a routing 
table; b) storing a copy uf a xuutiny eutxy indicating a packet 
flow that has been retrieved from the routing table to 
retrievably stoxe a pluxalxLy uf xelxieved packet flows in a 
flow table; c) storing a list of retrieved packet flows which 

25 are linked from a leading one lu a bottom one in an addxess poiaLex 
table; and d) accessing a desired retrieved packet flow in the 
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flow table by referring to the list stored in the address pointer 
table. 

The step (d) may include the steps of; when a packet flow 
corresponding r.o a rar.fti vad packet fai 1 a ro bft found i n f ha sftarnh 
3 table, searching the routing table for the packet flow; 

registering the found packet flow as a routing result into the 
search table; determining whether the found packet flow is a 
micro flow belonging to an aggregated flow; whan the found packet 
flow Is the micro flow, searching the search table for a boLLum 

10 retrieved packet flow of the list corresponding to the aggregated 
fluw; adding the found packet flow Lu the bo t turn r e trleved packe t 
flow stored in the search table; and when the found packet flow 
Is uul the micro fluw, storing an ddQrei>s of the found packet 
flow in the search table into a corresponding routing entry in 

15 the rem Liny table. 

The step (d) may include the steps of: when an aggregated 
XV u tiny entry has been designated to be deleted, deleting each 
of the retrieved packet flows included in a list related to the 
aggregated routing entry from tile address pointer table until 

20 finding a bottom retrieved packet flow of the list; releasing 
a chain of the retrieved packet flows formed in the addxess 
pointer table to make them available ; deleting a retrieved packet 
flow corresponding to the aygreyaLed routing entry from the flew 
table; and deleting the aggregated routing entry from the routing 

2 5 table. 
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FSKTKF DESCRIPTION OF THK DRAWINGS 

Rig. 1 is a diagram showing a packet switching system 
according to an embodiment of the present invention; 

Fig. 2 is a diagram showing an example of an IP flow table 
5 in the embodiment; 

Fig. 3 is a diagram showing a relationship among routing 
l<able, IP flow labltt, <aud dddieya puinler table fox explaining 
an operation of the embodiment; 

Fig. 4 is a flow chart showing a data search operation 
10 of Hie embodiment.; 

Fig. 5 is a flow ohail showing a data registration 
operation of the embodiment; and 

Fig. 6 is a flow chart showing a data deletion operation 
of the embodimenl . 

15 DESCRIPTION OF THE PREFERRED EMBODIMENT 



Hereinafter, taking a packet switching system as an 
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example, a preferred embodiment of the present invention will 
be described. 

As shown in Fig. 1, a packet switching system according 
to an embodiment of the prasanr. invention i s proving -with a 
5 microprocessor 11 and a main memory 12 connected to the 

mi croproce.ssor 1 1 by a professor bus 1 3, through which a packet 
processor 14 connected to a packet memory 15, a searcher 16, 
and a search memory 17 including an IP flow table 17a are 
connected to each other. The packet processor 14 is connected 
10 to a security processor 19 and lower-layer processors 20 through 
a switch fabric 18 , The switch labxic IS i*» commoted Lu ueiwuik 
interfaces (not shown) through the respective lower-layer 

processors 20. 

The main memory 12 stores a routing table 12a and an address 

15 pointer table APT. The microprocessor 11 performs Lhe entire 
control of the packet switching system and further performs 
packet processing such as packet next-hop de terminations 
according to the predetermined routing algorithm and protocol 
and update ol the routing table 12a depending on the ruuLiuy 

20 results. The main memory 12 further stores control programs 
includiny the packet processing proyrom to run un the 
microprocessor 11. 

The ruutiuy table 12a is, a database storiny output port 
numbers and next -hop layer 2 addresses which are retrievable 

25 usiny a network prefix of an IP destination address included 
in a received packet as a search key. The routing table 12a is 
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created and updated by the microprocessor 11 performing the 
routing processing. More specifically . the routing process is 
performed such that the routing table 12a is created on the main 
memory 12 by learning the network topology of a narwork r-onnp.cr.ftd 
5 to the packet switching system and computing metric and the 
routing table 12a 1s updated at. regular interval <=: according to 
a specific routing protocol . 

Thp afldrfisp: pointer tab"! p. &PT stores information 
representing relationships between entries ol the routing table 
10 12a and entries of the IP flow table 17a. The details of the 
address pointer table AFT will be described later. 

The packet processor 14 is a forwarding controller or a 
search controller, which performs I? header processing and 
forwarding of a received packet to a destination network 
ID interlace 20 by starting up the searcher 16 to obtain a search 
result from the searcher 16. 

The searcher 16, when started by the packet pruuessor 14, 
searches the IP flow table 17a according to a search key composed 
of the IP source and destination addresses of a received packet . 
20 The search result is sent back to the packet processor 14. 

The IP flow table 17a registers routing results ubtained 
by the microprocessor 11 performing the routing process for each 
IP flow entry- The registered entries are manayed by the 
software running on the microprocessor 11. The details will be 
2 5 described hereinafter, 

As shown in Fig. 2, the IP flow table 17a can store a 
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predetermined number of IP flow entries in the order in which 
the IP flows appeared. Each IP flow entry is composed of a search 
key and a routing result, and as necessary may include security 
information. The search key is composed of IP source addrass 
5 and IP destination address. The routing result is composed of 
MAC source* address, MAC destination address, and output port 
number. Security information is composed of encryption 
algorithm, ftncrypf inn kfty, rspw TP ?mjrrp *ddT-*»ss, and new IP 
destination address, 

10 In the above-described configuration, when receiving a 

packet at a network interlace, the packet is subject to layer -2 
processing and is stored in the packet memory 15. the IP header 
of the packet stored in rhe packet memory 15 is analyzed by the 
packet processor 14 under control of the microprocessor 11. If 

13 it is determined that the packet has been normally received, 
then the IP header is transferred to the searcher 16. 

When receiving the IP header, the searcher 16 extracts 
necessary data (here, IP destination address and IP source 
address) from the IP header and assembles a search key from the 

20 extracted data. The searcher 16 searches the I? flow table 17a 
according to the search key (here, composed of the IP destination 
address and IP source address) . As shown in Fig. 2, the searcher 
16 searches the search key field of the IP flow table 17a lor 
a combination of the IP destination address and IP source address 

25 u£ the received packet. 

When a hit is found in the IP flow tabid 17a, the routing 
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result and security information corresponding to the hit search 
key are read from the IF flow table 17a. More specif inn 1 ly. fhp. 
output port number, next-hop layer-2 address, encapsulating 
header and the like corresponding to the h.1 1 search key are read 
5 out and sent back to the packet processor 14. When receiving 
the found routing result and security i nf ormation f mm the 
searcher 16, the packet processor 14 performs header updating 
based on these data and, if necessary, may start the searcher 
16 searching the IP flow table 17a lor the encapsulated IP header . 

10 After the above-described IP header processing has been 

completed, the packet processor 14 reads out the currespuudiny 
packet data from the packet memory 15 to transfer the packet 
to a destination network interlace through a corresponding 
lower- layer processor 20 in which the packet is subject to 

15 layer-2 and layer -1 processing. 

It should be noted that the packet switching system as 
described above may perform security pruceb&iny such as data 
encryption/decryption processing in units of a packet in 
addition to the routing processing. The details uf the security 

20 processing have been disclosed in the Japanese Patent 
Application No. 11-096140 (Unexamined Publication No- 
P2000-29527d;V) . 

Referring tu Fly. 3, the rouLiny table 12a ^Luicb a 
plurality of routing entries, each of which has two pointers 

25 at the tail end thereof: PTR1 and PTR2 . In Lhe case where a 
routing entry itself is an aggregated IP flow, the pointer PTPl 
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indicates the address at which the aggregated IP flow 
corresponding to the routing entry is stored in the TP flow tab! r 
17a and the pointer PTR2 indicates the leading address of a linked 
list of minro flows belonging to the aggregated TP flow in the. 
5 address pointer table APT. In the case where the routing entry 
itself is a micro flow, NUTJi is written into both the pointer? 

PTRI and PTR2, 

The address pointer table APT is composed of a plurality 
of fixed- size memory blocks (e.g. 4 bytes) and stores link 

10 information representing a linked list of micro flows. Each of 
the memu.Ly blocks has a store address and a uext pointer. The 
store address indicates the address at which a corresponding 
micro flow is s Lured in the I? flow table 17a. The next pointer 
indicates the address of a next memory block when a next entry 

15 exists and, if no next entry exists, then the address of its 
own . 

II is assumed as shown in Fiy . 3 Ilia I the pointer PTRI 
of the routing entry 1 indicates the address of an aggregated 
flow (IP flow 1) and the pointer PTR2 indicates the leading 

20 address of a linked list of four micro flows (IP flows 2-5) as 
indicated by AD 1- AD 4 in the address puixilej. Labie APT. In the 
first memory block AD1, the store address indicates the first 
micro flow (I? flow 2) and Lhe next pointer indicate* the addicts 
of the second memory block AD 2 . In the second memory block AD 2 , 

25 the stojee address indicates the second miciu flow (IP flow 3) 
and the next pointer indicates the address of the third memory 
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block AD3. It ±3 the some with the third memory block AD 3 . In 
the fourth memory block AD4, the store address indicat** the 
fourth micro flow {IP flow 5} and the next pointer indicates 
the address of its own because the TP flow s is the bottom of 
5 the linked list. 

The linked- list structure is managed by the 
microprocessor 11 - When a micro flow belonging to the aggregate 
flow is detected, the microprocessor 11 looks at the pointers 
FTR1 and PTK2 to follow a chain ol micro flows from IP flow 2 

10 to IP flow 5 in the IP flow table 17a while referring to the 
address pointer table AFT from the first memory block AD1 Lu 
the fourth memory block AD4. And the microprocessor II stores 
the new micro flow into an address following the buLLum uf Law 
list in the IP flow table 17a and further stores new link 

15 information into the next memory block ADS following the fuurlh 
memory block AD4 . Accordingly, in the fourth memory block AD 4 , 
the next pointer Indicates the address of the filLh memory block 
ADS. In the fifth memory block ADS, the store address indicates 
the fifth micro flow (IP flow 6) and the next pointer iudiuaLe* 

20 the address of its own because the IP flow 6 is the bottom of 
the linked list. In this manner, the entries axe bequenlially 
jr^gistered in the IP flow table 17a in the order in which the 
packets arrived depending on traffic char ac Ler is Lies . Sin^c 
each entry is added to the IP flow table 17a in the arrival order, 

25 Lho regis Lered enLries in the IP flow table I7a are nut in orderly 
sequence . 
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On the other hand, in the case where the contents of the 
routing table 12a is changed due to dynamic routing oparati nn , 
it is necessary to update the corresponding entries of the IP 
flow table 17a so as to be consistent with the update routing 
5 table 12a. If the IP flow table 17a were not updated, then the 
optimal routing cannot bp. achieved or some packets may be 
discarded on the following link. Therefore/ when the routing 
table 12a has been updated, the microprocessor 11 determines 
where relevant entries linked in a chain are stored in the IP 

10 flow table 17a by referring to the address pointer table APT 
as described above. When such a linked list o£ ea tries have b^en 
found, the microprocessor 11 update them so as to be consistent 
with the routing table 12a, 

As described above, the microprocessor 11 is allowed to 

15 directly access each ol linked entries scattered thxoughout the 
IP flow table 17a by following a chain of address pointers in 
the address pointer table APT without any seai uhiny uy©j.aliuu. 
Accordingly, it is very easy to change and delete an entry of 
the IP flow table 17a, resulting in high-speed beaxuhiuy and 

20 updating. 

DATA SEARCH 

When a packet is received at a network interface, the 
packet L pi octsssuj. 14 starts up the Seaidiei 16. When xeceiving 
the IP header from the packet processor Id, the searcher 16 
25 extracts search key data (liexe, I? destinatiuu addie^ and IP 
source address) from the IP header (step £101) and searches the 
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IP flow tabic 17a according to the search key (atcp S102 > , When 

a hit is found in the if flow table 1/a uas at step siojs), 
necessary information including the corresponding output port 
number are read out (step siU4) ana sent oacx to tne packet 

5 processor 14 or the microprocessor 11 (step S105) . When no hit 
is found in the IP tlow table 17a (NO at step s!03), control 
goes to a data registration routine. 
H&T* RTTOTSTK&TTOM 

Referring to Fig. 5, when the data registration procedure 

1(1 starts, the TP header information is transferred to the 

microprocessor 11 (step S10G) and the routing processing is 
performed (step 551 07). More specifically, the TP header 1s 
analysed to form a search key and the routing table 12a is 
searched according to the search key. The routing result is 

15 registered in the IP flow table 17a {step 3100). 

Thereafter, It is determined whether the received packet 
is a micro flow (step S109) * If it is a micro flow (YES at step 

the microprocessor 11 reads the pointer PTR2 of the 
relevant routing entry from the routing table 12a (step 3110) 

20 and annesses the leading address of a linked list in the address 
pointer table APT and traces linked memory blocks to find the 
bottom of the list (step Sill). Then, the micro flow address 
on the IP flow table is added to the bottom of the list (step 
S112) and the data registration procedure is terminated. 

25 If it is determined that the received packet is not a micro 

flow (ND at stpp the micro flow address on the TP flow 
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table is written into the pointer FTRl of the relevant routing 
entry in the routing table 12a (step S113). 

The data registration on the IP flow table 17a is performed 
as described above. Accordingly, when a packet having thft same. 
5 IP header information, the routing processing is performed by 
searching only the IP flow table, allowing high-ftpAftd packet 
routing or forwarding. 
dvta nsr.CTTON 

As described before, if there is data with low use 
10 frequency or data after the expiration of a preset time interval , 
then the data is deleted from the IP flow table 17a and the routing 
table 12a as described hereinafter. 

Refexxiny to Fly, 6, dftex xe^idiiiy ouL the puinLei PTR2 
of a designated routing entry to be deleted from the routing 

15 table 12a (step S201), the Store dddicbb stuped in the memory 
block indicated by the read pointer PTR2 is read out from the 
addx'ess pointer table APT (stop S202). Then, the entry dL the 
read store address (here, a micro flow) is deleted from the IP 
flow table 17a ( a Ley S203). Thexeaf Lei. , it is deLexuiiued 

20 whether the current memory block is the bottom of the list (step 
S204) . When it is not the bottom of the list (NO cl 5 Lep S204) , 
the next memory block on the list is accessed (step S205) and 
the steys S202-203 <aie xeyetitedly performed while prooeediny 
to next memory block until reaching the bottom of the list. 

25 When it is determined that the current mp.mnry hlnnk is 
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the bottom of the list {YES at step G204) , the chain of relevant 
list i 55 released on the address pointer table (step S206) snd 
the pointer PTR1 of the relevant entry is read from the routing 
tab! a 12a (st.Ap S207). Then, t.h« antry at. tha address indicated 
5 by the read pointer FTR1 (here, an aggregate flow) is deleted 
from the IP flow table 17a (step $203). Further, the relevant 
routing entry is deleted from the routing table 12a (step S209) . 

In this way, all the related pieces of data can be 
efficiently deleted from each of the routing table 12a, the IP 
10 flow table 17a, and the address pointer table APT , 

As described above, the address pointer table provides 
relationships between entries of the routing table and entries 
o£ the IP flow table. 3y referring to the address pointer table, 
the microprocessor can directly find linked IP flows from the 
15 IP flow table without searching the IP flow table. Therefore, 
the table management for encapsulated IP packet flows can be 
simplified and the time required for packet routing and 
forwarding processing can be dramatically reduced, resulting 
in improved throughput of the packet switch. 

20 Further, the addrass pointer tabid is usad to provide 

relationships between entries different in structure and 
attribute of a search kay, allowing simplified system 
configuration of a packet switch requiring aggregate processing 
of IP flows such as IPsec and Diff serve. 
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The present invention is al30 applicable to any searching 
system having a search table in addition to a database, wherein 
the searching table is designed to store data that has been 
ratH AVAd from thft datahaaA. Mora spAri f ir:al ly, an address 
3 pointer table is provided, which can provide relationships 
between entries of the database and entries of the search table. 
By referring to the address pointer table, the search processor 
can directly find linked pieces of data from the search table 
wiLhouL sear chin 9 the search table (see Fi$ 4). Further, if no 

10 hit is found in the search table, the data registration is 

performed <as shown in Fig. 5- Fui Lhtiimoie, in the cd.se where 
any data of the search table should be deleted under condition 
of expiralrou or Lhe like, Lhe data deletion is performed as 
shown in Fig. 6. Therefore, in the case where a plurality o£ 

15 pieces uf dala is linked Lo form a lisL, all the d<tl<a of the 
list can be retrieved, registered, and deleted rapidly. 



